数字泔水\(⁠◔⁠‿⁠◔⁠)✨ Thinking...https://tg.okhk.nethttps://tg.okhk.net/posts/10755https://tg.okhk.net/posts/10755Fri, 07 Aug 2026 07:56:17 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4896" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> Linux 内核 Open vSwitch 模块本地提权漏洞 OVSwrap。<br /><br />- 在用户命名空间有 CAP_NET_ADMIN 权限的进程 (<code>unshare -Urn</code>) 即可以利用此漏洞提权。<br />- 大多主流发行版均受到影响。<br />- Mitigation 是禁用 <code>openvswitch</code> 模块或 unprivileged user namespace 。<br />- <mark class="highlight">Kernel</mark> 上游和 Debian 各支持版本已经发布修复。<br /><br /><a href="https://heyitsas.im/posts/ovswrap/" target="_blank" rel="noopener" title="heyitsas.im/~">heyitsas.im/~</a><br /><br />CVE: CVE-2026-64531<br />CVSS: 7.8 (<a href="http://kernel.org/" target="_blank" rel="noopener" title="kernel.org">kernel.org</a>)<br />Fixed-In: 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5<br /><br />[感谢一位匿名订户提供信息。]<br /><br /><i>EDIT 8/7</i>: 修正对利用此漏洞条件的描述。<br /><br /><a href="/search/result?q=%23OpenvSwitch" title="#OpenvSwitch">#OpenvSwitch</a> <a href="/search/result?q=%23Kernel" title="#Kernel">#Kernel</a>https://tg.okhk.net/posts/10754https://tg.okhk.net/posts/10754Fri, 07 Aug 2026 07:56:10 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4895" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> Linux 内核 sctp 模块本地提权漏洞 SCTPhantom。<br /><br />- 腾讯朱雀实验室利用 AI 辅助发现了一个于 2008 年引入的 sctp 模块的漏洞。<br />- <mark class="highlight">Kernel</mark> 上游和 Debian Trixie/Sid 已经发布修复版本。<br /><br />CVE: CVE-2026-64564<br />CVSS: 8.5 （作者自评）<br />Fixed-In: 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2-rc5<br /><br /><a href="https://matrix.tencent.com/zh/2026/08/06/sctphantom-CVE-2026-64564" target="_blank" rel="noopener" title="matrix.tencent.com/~">matrix.tencent.com/~</a><br /><br />[感谢一位匿名订户提供信息。]<br /><br /><a href="/search/result?q=%23SCTPhantom" title="#SCTPhantom">#SCTPhantom</a> <a href="/search/result?q=%23Kernel" title="#Kernel">#Kernel</a><a class="tgme_widget_message_link_preview" href="https://matrix.tencent.com/zh/2026/08/06/sctphantom-CVE-2026-64564" target="_blank" rel="noopener" title="SCTPhantom 是 Linux 内核 SCTP 动态地址重配置功能中的一个释放后使用漏洞。"> <div class="link_preview_site_name accent_color">腾讯朱雀实验室</div> <img class="link_preview_image" alt="SCTPhantom: 潜伏18年的Linux内核提权与容器逃逸漏洞 · 腾讯朱雀实验室" src="/static/https://cdn4.telesco.pe/file/Vv5OassIi9jXhsMjfl9fMrg9QuczO3f3uYouW0wu2fbbBGAoEkqia0Nqrb6B9peZwU5Vyb5D9XBVEkLMNvhKHVRxXn3TlA_gHPJhuNfmAtUlDJ-VVES3L3xCXMIH5BmI0xRqu8JcLlCwXuLRA6fnweMTpZtq_ASG0eHHJvjJmIC_Lyvc8rp-YO1XPqU82S2i5S0MSpzI2hLjk_Wcyw3S5ZuHALl31sTVk0rHfQi6YiM0WO9oB748GUJ8r11QxfzF2MT4Xn8uQHOt7gD-8RHEsffhn3_qvtnBdjDk0LgA77GiqsBr6EaMBlQ8OYahZJQOSTtFahrwmCpb5x-Efn5saA.jpg" width="1200" height="630" loading="eager" /> <div class="link_preview_title">SCTPhantom: 潜伏18年的Linux内核提权与容器逃逸漏洞 · 腾讯朱雀实验室</div> <div class="link_preview_description">SCTPhantom 是 Linux 内核 SCTP 动态地址重配置功能中的一个释放后使用漏洞。</div> </a>